4.3Medium

CVE-2024-43239WordPress Masteriyo LMS plugin <= 1.11.4 - Insecure Direct Object Reference (IDOR) vulnerability

masteriyo Masteriyo - LMS Published: (2 years ago)

Description

Authorization Bypass Through User-Controlled Key vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.11.4.

Weakness (CWE): CWE-639

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
masteriyo Masteriyo - LMS ≤ 1.11.4

References and patches